VDB

RHSA-2022%3A5730

RHSA-2022%3A5730 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the big package of the math library in golang. The Rat.SetString could cause an overflow, and if left unhandled, it could lead to excessive memory use. This issue could allow a remote attacker to impact the availability of the system.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-cluster-autoscaler@sha256:acc90a1d146aec7dadd4732bfe115dd891efe413ff63742ab7fa44a1c47213d2_amd64 as a component of Red Hat OpenShift Container Platform 4.10*
Red Hatopenshift4/ose-cli-artifacts@sha256:191f2e247b00fde8c55f194042eb8693d7b9f33c352f2b952c3b93a9f1e23d70_s390x as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-cli-artifacts@sha256:191f2e247b00fde8c55f194042eb8693d7b9f33c352f2b952c3b93a9f1e23d70_s390x
Red Hatopenshift4/ose-cluster-samples-operator@sha256:1f02fd10639509b02e9d3bc96f7bef8b2eb3fd5077df646c025b8aca2ee2434f_amd64 as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-cluster-samples-operator@sha256:1f02fd10639509b02e9d3bc96f7bef8b2eb3fd5077df646c025b8aca2ee2434f_amd64
Red Hatopenshift4/ose-prometheus-config-reloader@sha256:cd6a1af3e735883769b24c08fef90457b0ae9c86aa7b5d00878cd3ca5bea21df_amd64 as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-prometheus-config-reloader@sha256:cd6a1af3e735883769b24c08fef90457b0ae9c86aa7b5d00878cd3ca5bea21df_amd64
Red Hatopenshift4/ose-network-metrics-daemon-rhel8@sha256:fde65f6a6bfd927c980db762a00561b2e421fb219f59f551a7226303ded388a1_arm64 as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-network-metrics-daemon-rhel8@sha256:fde65f6a6bfd927c980db762a00561b2e421fb219f59f551a7226303ded388a1_arm64
Red Hatopenshift4/ose-cluster-dns-operator@sha256:3191dcb00f9b441fe789e02e5c7f7577e9e86049aa39e2887b5727ad8c04dbdb_ppc64le as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-cluster-dns-operator@sha256:3191dcb00f9b441fe789e02e5c7f7577e9e86049aa39e2887b5727ad8c04dbdb_ppc64le
Red Hatopenshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:5aea03513ba5fbbcef33bc19afe600414e1ce86f4903e620a11039eeee55257e_amd64 as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:5aea03513ba5fbbcef33bc19afe600414e1ce86f4903e620a11039eeee55257e_amd64
Red Hatopenshift4/ose-cli-artifacts@sha256:1de4373c2805bc4512005a529ed46b549dcd6bb8e6eb47e60920f855e00592f2_arm64 as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-cli-artifacts@sha256:1de4373c2805bc4512005a529ed46b549dcd6bb8e6eb47e60920f855e00592f2_arm64
Red Hatopenshift4/ose-ironic-rhel8@sha256:13a41e6756e942a8346cc77edfcfa1e927b4182fe9e9437770653b9492336d35_amd64 as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-ironic-rhel8@sha256:13a41e6756e942a8346cc77edfcfa1e927b4182fe9e9437770653b9492336d35_amd64
Red Hatopenshift4/ose-baremetal-runtimecfg-rhel8@sha256:1689e71acf2e3ce2bea9211a79744e0b20e094ec9f089b7864f2dbaae1b73da2_amd64 as a component of Red Hat OpenShift Container Platform 4.10*
Red Hatopenshift4/ose-cluster-node-tuning-operator@sha256:396e20129ddd2475dfc98180f4f4215e850406923e01231d906398a184944f6a_ppc64le as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-cluster-node-tuning-operator@sha256:396e20129ddd2475dfc98180f4f4215e850406923e01231d906398a184944f6a_ppc64le
Red Hatopenshift4/ose-openstack-machine-controllers@sha256:f6ee116e39c54cfc9f31dbb47cd5a146655768d103ce0e2264ab29d47547a205_arm64 as a component of Red Hat OpenShift Container Platform 4.10*
Red Hatopenshift4/network-tools-rhel8@sha256:2e3fdc1ac8bc097d001e97a6daeaa6c73469716dfa6e9c7b949361070ebd1b75_s390x as a component of Red Hat OpenShift Container Platform 4.10openshift4/network-tools-rhel8@sha256:2e3fdc1ac8bc097d001e97a6daeaa6c73469716dfa6e9c7b949361070ebd1b75_s390x
Red Hatopenshift4/ovirt-csi-driver-rhel8-operator@sha256:5fb023a50d26a5d926cb7f10f3f7ab3448545937f08307d7cfe06bd2861b2133_ppc64le as a component of Red Hat OpenShift Container Platform 4.10openshift4/ovirt-csi-driver-rhel8-operator@sha256:5fb023a50d26a5d926cb7f10f3f7ab3448545937f08307d7cfe06bd2861b2133_ppc64le
Red Hatopenshift4/ose-csi-driver-manila-rhel8@sha256:e97310fee33e834cf1176fe1e1024a90aac0c14b548d6fc8b1c1b1d2dbe0c21f_ppc64le as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-csi-driver-manila-rhel8@sha256:e97310fee33e834cf1176fe1e1024a90aac0c14b548d6fc8b1c1b1d2dbe0c21f_ppc64le
Red Hatopenshift4/ose-multus-admission-controller@sha256:5a95b9cd4e34d49aa8a3465c92d9c3d7eb833ea5340f582c2fc4fe86070bcbda_s390x as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-multus-admission-controller@sha256:5a95b9cd4e34d49aa8a3465c92d9c3d7eb833ea5340f582c2fc4fe86070bcbda_s390x
Red Hatopenshift4/ose-csi-external-resizer-rhel8@sha256:e88e0b93e65b718aa52e23842f827087b74b4c60e4b9a8e623a69a5ed0f3455d_amd64 as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-csi-external-resizer-rhel8@sha256:e88e0b93e65b718aa52e23842f827087b74b4c60e4b9a8e623a69a5ed0f3455d_amd64
Red Hatopenshift4/ose-cluster-storage-operator@sha256:d732794dcecfebf7bc06da364a5cf83f4a8c18ec8b8fc556510a35cd7697fd5f_s390x as a component of Red Hat OpenShift Container Platform 4.10*
Red Hatopenshift4/ose-console@sha256:078698dfb9230ef5f9661c924869d323b9e24a39b0b94e91853af19279f5e3c8_ppc64le as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-console@sha256:078698dfb9230ef5f9661c924869d323b9e24a39b0b94e91853af19279f5e3c8_ppc64le
Red Hatopenshift4/ose-csi-external-snapshotter-rhel8@sha256:632bdb4e1f6e0337299f80b8971e68a71832f4d5f8e22c3f89eded496e6bc4ed_ppc64le as a component of Red Hat OpenShift Container Platform 4.10openshift4/ose-csi-external-snapshotter-rhel8@sha256:632bdb4e1f6e0337299f80b8971e68a71832f4d5f8e22c3f89eded496e6bc4ed_ppc64le

…and 1116 more

Timeline

  • Aug 1, 2022 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 30, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›